Lucene search
K

12 matches found

Openbugbounty
Openbugbounty
added 2017/06/07 10:47 a.m.24 views

alamy.com XSS vulnerability

Open Bug Bounty ID: OBB-245504 Description| Value ---|--- Affected Website:| alamy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2016/11/15 11:10 a.m.11 views

cbn.com XSS vulnerability

Vulnerable URL: https://www.cbn.com/Auth/social/Logon.aspx?ParentUrl=alert'OPENBUGBOUNTY';...

6.9AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.10 views

InstantASP 4.1 Logon.aspx SessionID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.10 views

Immediacy .NET CMS 5.2 Logon.ASPX Cross-Site Scripting Vulnerability

No description provided by source...

7.1AI score
Exploits0
NVD
NVD
added 2007/01/18 12:28 a.m.16 views

CVE-2007-0302

Multiple cross-site scripting XSS vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 SessionID parameter to a Logon.aspx, and the 2 Username and 3 Update parameters to b Members1.aspx...

6.8CVSS5.8AI score0.10054EPSS
Exploits0References8
Prion
Prion
added 2007/01/18 12:28 a.m.11 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 SessionID parameter to a Logon.aspx, and the 2 Username and 3 Update parameters to b Members1.aspx...

6.8CVSS6.1AI score0.10054EPSS
Exploits0References8Affected Software1
CVE
CVE
added 2007/01/18 12:0 a.m.44 views

CVE-2007-0302

CVE-2007-0302 affects InstantASP 4.1.0 with multiple cross-site scripting (XSS) flaws. An attacker can inject arbitrary script/HTML via (1) SessionID to Logon.aspx and (2) Username and (3) Update to Members1.aspx, enabling web-script injection. The NVD CVSS2 base score is 6.8 (MEDIUM) with networ...

6.8CVSS5.8AI score0.10054EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2007/01/18 12:0 a.m.18 views

CVE-2007-0302

Multiple cross-site scripting XSS vulnerabilities in InstantASP 4.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 SessionID parameter to a Logon.aspx, and the 2 Username and 3 Update parameters to b Members1.aspx...

5.8AI score0.10054EPSS
Exploits0References8
exploitpack
exploitpack
added 2007/01/15 12:0 a.m.15 views

InstantASP 4.1 - Logon.aspx?sessionid Cross-Site Scripting

InstantASP 4.1 - Logon.aspx?sessionid Cross-Site Scripting source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issu...

6.8AI score
Exploits0
Exploit DB
Exploit DB
added 2007/01/15 12:0 a.m.31 views

InstantASP 4.1 - 'Logon.aspx?sessionid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and...

7.4AI score
Exploits0
NVD
NVD
added 2006/11/10 2:7 a.m.7 views

CVE-2006-5853

Cross-site scripting XSS vulnerability in logon.aspx in Immediacy CMS Immediacy .NET CMS 5.2 allows remote attackers to inject arbitrary web script or HTML via the lang parameter, which is returned to the client in a lang cookie...

6.8CVSS5.7AI score0.09217EPSS
Exploits1References5
securityvulns
securityvulns
added 2006/03/19 12:0 a.m.32 views

XSS in InstantForum.NET v4.1.1

Advisory: InstantForum.NET v4.1.1 Home Page: http://instantasp.co.uk/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: Logon.aspx, Search1-2-1.aspx, InsertAttachments.aspx...

7.1AI score
Exploits0
Rows per page
Query Builder